test-generation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on user-provided requirements and user stories to automatically generate ServiceNow Automated Test Framework (ATF) components, establishing an attack surface for indirect prompt injection.
- Ingestion points: Ingests unstructured inputs such as user requirements, functional descriptions, and acceptance criteria to create test logic.
- Boundary markers: No strict boundary delimiters or isolation commands are used to encapsulate or neutralize text blocks containing embedded prompts.
- Capability inventory: Possesses capabilities to perform automated operations via
SN-Create-Recordand run scripts throughSN-Execute-Background-Scriptwithin the scoped target instance. - Sanitization: Lacks specific verification or filtering mechanisms to validate input text prior to generation loops.
Audit Metadata